Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] query regarding handoff function

From: Anders Broman <anders.broman@xxxxxxxxxxxx>
Date: Mon, 17 Feb 2014 08:45:53 +0000

 

 

From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Rahul Rohit
Sent: den 17 februari 2014 08:29
To: wireshark-dev@xxxxxxxxxxxxx
Subject: [Wireshark-dev] query regarding handoff function

 

>Hi,

>If the handoff function includes all  those protocols to which the packets can be forwarded for dissection from the current protocol, why the handoff function for sctp does not contain the handle of >NBAP protocol( As depending on the port value the packets from sctp can be forwarded to NBAP protocols , why  NBAP handle is not  in sctp handoff function ) ??

 

Because that’s not the way it works J

 

proto_reg_handoff_sctp()

 

Is called so the SCTP dissector can do its own registrations.

 

In void proto_register_sctp(void)

 

 

The SCTP dissector registers two dissector tables.

sctp_port_dissector_table = register_dissector_table("sctp.port", "SCTP port", FT_UINT16, BASE_DEC);

sctp_ppi_dissector_table  = register_dissector_table("sctp.ppi""SCTP payload protocol identifier", FT_UINT32, BASE_HEX);

 

Any dissector wanting to be called from the SCTP dissector needs to register in those tables in its own handoff routine. In the menu bar there is an “internal” menu

In that menu you can get a list of the dissector tables and what’s been registered in them.

 

Best regards

Anders